
Error: rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
Error: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D8B7C1B022D90A4E26EB00EEE79A68375511430.cer: certificate revoked on Sat 04 Jul 2026 16:48:26 +0000
Manifest
$ rpki-client -vvvf rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.mft
File: 7D8B7C1B022D90A4E26EB00EEE79A68375511430.mft (raw, json)
Hash identifier: 4zpmBjt3lgSWylE0xAWItk93fN7TtyfCw68Vt2kFs/Y=
Subject key identifier: 4D:A3:AF:F7:40:C7:E0:C4:6C:B1:59:19:64:54:F9:FE:B4:A8:05:2E
Authority key identifier: 7D:8B:7C:1B:02:2D:90:A4:E2:6E:B0:0E:EE:79:A6:83:75:51:14:30
Certificate issuer: /CN=7D8B7C1B022D90A4E26EB00EEE79A68375511430
Certificate serial: 3DDF97A2C39B6A67D51EE2C4CFBFB97B161A43D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D8B7C1B022D90A4E26EB00EEE79A68375511430.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.mft
Manifest number: F5
Signing time: Sun 28 Jun 2026 20:37:40 +0000
Manifest this update: Sun 28 Jun 2026 20:32:40 +0000
Manifest next update: Mon 29 Jun 2026 22:30:40 +0000
Files and hashes: 1: 3137372e37332e39362e302f32312d3234203d3e20323632353637.roa (hash: q1Hp2xTc+q7hLIOLgc1noAkSJGQvZUJTPvDqa1x7xRs=)
2: 323830343a343565343a3a2f33322d3438203d3e20323632353637.roa (hash: I9nQetKRTb/CMv5oOvnICH83vEkeS/E3EmmEXKa+Xss=)
3: 3139312e33372e3139362e302f32322d3234203d3e20323633343034.roa (hash: 9kwcfcOebyOMtb48Kb7k3HxlkC5EOgYlI7AXA/fW2rs=)
4: 7D8B7C1B022D90A4E26EB00EEE79A68375511430.crl (hash: HGT08m/jUqLwBp9IVy99norxTxJKYXDO5quRuJhqSds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:df:97:a2:c3:9b:6a:67:d5:1e:e2:c4:cf:bf:b9:7b:16:1a:43:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D8B7C1B022D90A4E26EB00EEE79A68375511430
Validity
Not Before: Jun 28 20:32:40 2026 GMT
Not After : Jun 29 22:30:40 2026 GMT
Subject: CN=4DA3AFF740C7E0C46CB159196454F9FEB4A8052E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:7b:20:a9:ac:8f:2e:64:6a:0d:1d:f3:10:
1f:dd:db:8a:44:81:b9:b9:37:07:41:38:af:41:86:
e9:78:ea:0a:ba:fd:15:55:d9:0b:82:b0:42:e9:aa:
28:b1:e9:69:a7:3f:bc:e4:6e:ab:d2:fc:60:c3:b2:
15:aa:6d:a3:a2:31:6d:7d:4a:b9:60:ee:5f:f6:69:
60:a3:28:ad:5c:bf:45:14:ba:a6:2f:f8:d9:86:27:
f1:03:4e:9d:0d:b9:41:64:c3:ae:c6:c1:b7:09:2a:
87:02:aa:ee:5d:fe:9e:23:54:93:7a:ff:1c:ed:9f:
ca:c3:01:96:f7:b2:ad:4b:fb:6a:54:8b:8c:87:6a:
1e:e8:13:b7:11:e7:94:1e:68:49:a1:8f:5c:4b:d4:
e5:3a:b2:8c:b5:f4:5a:f8:75:e7:62:70:a0:51:53:
02:cc:d9:af:92:6e:81:f7:b0:a5:9a:72:3b:0b:4c:
a5:1e:3b:59:95:52:03:6f:42:da:98:47:82:09:00:
cb:e5:46:1e:12:a9:2f:43:4e:61:94:31:6a:c9:0d:
9d:07:48:5c:a8:e7:93:22:1b:99:03:4a:11:50:b9:
02:ac:e7:b9:48:47:c3:a6:df:00:cb:fb:30:85:98:
92:2e:04:3a:07:90:cb:c0:e2:2f:7d:90:ad:f5:02:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A3:AF:F7:40:C7:E0:C4:6C:B1:59:19:64:54:F9:FE:B4:A8:05:2E
X509v3 Authority Key Identifier:
keyid:7D:8B:7C:1B:02:2D:90:A4:E2:6E:B0:0E:EE:79:A6:83:75:51:14:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D8B7C1B022D90A4E26EB00EEE79A68375511430.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BpCBbJyonUgdsmg5Yw9KigKLDXMwVWsAFpChjZ1mRYD/0/7D8B7C1B022D90A4E26EB00EEE79A68375511430.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1b:a5:f3:ed:4e:63:2c:02:23:2b:35:13:69:ad:13:64:d2:
d7:6a:08:c5:70:51:4b:de:fb:29:55:75:11:a7:20:9c:bd:59:
87:1c:9b:63:d6:81:6a:6f:34:03:e4:f7:d7:69:66:e3:1f:2d:
f1:e0:49:52:11:8a:bd:a9:6e:00:a1:55:a3:4e:6a:db:5e:44:
92:79:f6:e4:d4:df:03:3c:f9:0d:c5:e7:67:72:13:9b:c4:ee:
ff:6b:98:43:66:bd:84:8d:78:58:8e:c8:71:90:9c:12:2b:23:
2e:01:37:98:30:64:ac:9c:89:07:65:6b:47:63:98:a2:46:7f:
ba:a4:73:49:16:24:5c:65:01:f9:ff:cf:0b:6b:40:b2:c5:21:
71:a4:1d:e0:ed:15:ac:88:05:d3:74:50:ae:b5:84:fc:bc:2b:
f9:2b:60:ba:53:b0:83:a6:02:6e:f0:4a:25:23:51:02:79:16:
b9:5d:de:df:7b:ac:62:63:8e:9e:ac:46:92:0d:f4:f7:d4:32:
39:ec:6a:d3:f4:53:a2:55:9b:4f:6b:2e:34:01:8c:91:d2:08:
b8:94:3e:1a:58:60:0d:d1:27:33:ee:e4:dd:56:09:a6:20:f6:
e8:80:79:3f:e9:30:ff:45:2c:87:32:b4:d3:19:85:5c:d7:94:
bb:02:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:33:43 2026 by rpki-client